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Privacy-Enhanced Display Device 

Field of the Invention 

The present invention relates generally to the field of data security, and more 
5 particularity to displaying secure data on display devices in public locations. 

Background of the Invention 

With the advent of desktop and portable computer systems, the problem of 
10 maintaining the confidentiality of secure data is increased. This is a particular 

problem for laptop computers and hand-held personal digital assistants (PDAs) that 
are frequently used in public locations. Data security is also a problem for other 
display systems, such as automated teller machines, and Internet terminals in 
public locations, such as Internet shops and airports. 

15 

In recent years, a great deal of effort has been expended on making flat panel 
display screens as readable as CRT screens by using active matrix technology. 
However, enhanced readability of displayed data increases the risk of confidential 
information being viewable by unauthorized persons when portable displays are 
20 used in public locations. 

One solution is to provide the display with physical "blinders" mounted on the side 
of the display to limit the angle at which the display can be seen. Another type of 
mechanical solution uses microscopic louvers to obscure the screen to any viewer 
25 not along the axis of the louvers. However, this does not prevent viewing by a 
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person sitting directly behind the user of the display. In addition, this type of 
arrangement does not allow the user to leave the equipment unattended. 

One manufacturer, InvisiView Technologies, Inc., Boca Raton, FL., removes the 
5 front polarizer from a LCD type of device so the displayed image is no longer 
visible. If the display is viewed through polarized lenses, it becomes visible. This 
is a partial solution because anyone wearing consumer-grade polarized sunglasses 
can defeat the system. 

10 U.S. Patent 5,528,319 "Privacy filter for a display device" issued to Austin on June 
18, 1996 describes a privacy filter constructed of spaced-apart opaque grids that 
can be fitted to a display device. The problems with this arrangement is that it 
requires physical modification of the device, and like the blinders above, only 
limits the angle at which the display can be viewed. 

15 

U.S. Patent 5,629,984 "System and method for data security" issued to McManis 
on May 13, 1997 describes a display system that alternates data frames with flash 
frames where an overwhelming majority of pixels are illuminated so that the flash 
frames have an average intensity substantially greater than the data frames. The 
20 user views the display with a shutter device that is synchronized to the displayed 
frames. The shutter is open for the data frames, and closed for the flash frames. 
The interspersed flash frames are intended to make it difficult for a viewer without 
the optical shutter device to intelligibly read the data frames. 

25 The problem with this system is that most people can perceive images even is the 
relative intensity of darkest elements is only about 1/100 that of the brightest 
elements. In other words, the intensity of the flash frames would have to be 
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increased by at least 20 db in order for the device to be effective. In a practical 
LCD applications, the display elements are usually driven at full power to 
maximize brightness. Therefore, it is problematic whether the driving voltage can 
be increased by a factor of a hundred. Even if the flash frames can be displayed, it 
5 is well known that over illuminating the display screen greatly shortens its useable 
life-span. In addition, the flash frames would attract attention to bystanders, and 
the device is more susceptible to counter attacks. 

Summary of the Invention' 

10 

The invention provides a method for displaying an image only to an authorized 
user by generating a mask image from a data image. The data and mask image are 
then displayed periodically in an alternating manner on a display device by a select 
signal. The opening and shutting of an optical shutter device is synchronized to the 

1 5 displaying of the selected images so that only the data image is perceived by the 
authorized user viewing the display device through the optical shutter device, and a 
gray image is perceived by an unauthorized user viewing the data and mask images 
directly. Alternatively, the displaying and operation of the optical shutter device 
can be in a random order that is only known to the display device and the shutter. 

20 In another alternative, the displaying and operation of the optical shutter device is 
done on a per pixel basis, either randomly or periodically. 

Brief Description of the Drawings 

25 Figure 1 is flow diagram of a privacy enhanced display system according to the 
invention; 
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Figure 2 is a flow diagram of a secure display according to the invention; 

Figure 3 is a flow diagram of an encoded display according to the invention; and 

5 Figure 4 is a flow diagram of an alternative embodiment of a secure display 
system. 

Detailed Description of the Preferred Embodiment 
10 System Overview 

Movies, televisions and computerized display devices normally display frames at a 
predetermined frame rate, e.g., twenty-four per second or higher. Persistence in the 
human visual system causes the rapidly displayed frames to merge into a 
15 continuous image. In the present invention, this persistence is used to enable 
privacy-enhanced display devices. 

As shown in Figure 1, input to the system is a data frame 101, or perhaps a 
sequence of data frames as in a video. Each data frame, in sequential order, is 
20 negated 1 10 to produce a mask (reverse) frame 102. The negation can be done by 
an inverter. A display device 120 than selectively displays either the data frame or 
the mask frame 102. The selection is done according to a select signal 161 
generated by a controller 160. In one embodiment, the controller 160 produces a 
clock signal that alternatively selects either the data frame or the negative frame. 

25 

The net result is a featureless neutral "gray" image 103 because the overall 
perceived intensity of the image is half-way between sum of the intensities of the 
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data and mask frames. Thus, privacy of the displayed information is preserved. It 
should be understood that frames of a video can be similarly be processed in 
sequence. 

5 A user 130 perceives only the data frames 101 by viewing the neutral images 103 
through a shutter device 140 that is synchronized 104 in phase and frequency to the 
frame rate of the display device 120. Frequency synchronization can be done 
internally to the optical shutter device 140. The shutter device 140 is open for the 
data frames 101 and closed for the mask frames 102 so that only the phase needs to 

10 be synchronized. 

One type of shutter device can use modified CrystalEyes™ eyewear manufactured 
by StereoGraphics Corporation of San Rafael, California and described in U.S. Pat. 
Nos. 4,4967268, 5,117,302, 5,181,133, and 5,463,428 incorporated herein by 
15 reference. The unmodified glasses operate the left and right lenses sequentially for 
stereoscopic viewing, the modified lenses operate in parallel. 

However, nematic liquid-crystal stereographic shutter glasses are typically limited 
to an operating frequency of 60 Hz, or less. This leads to noticeable flickering in 
20 the perceived image. Therefore, our shutter device 140 includes polarizing lenses 
141-142 on either side of a ferro-electric liquid crystal (FLC) polarization rotator 
143. The FLC rotator can switch polarization rotation from +n/4 to -^pi/4 at a 
frequency up to about 100 KHz, when driven by a bipolar ± 5.0 volt control line 
144 to take advantage of faster displays. 

25 

Wire or wireless, e.g., infra-red, communication can be used to synchronize to the 
phase of the display device 120. This allows the display device according to the 
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invention to be used concurrently by multiple users in a public location without 
requiring a physical link between the users and the display device. 

For safety and ease-of-use reasons, the optical shutter device 140 operates 
5 continuously while worn by the user so that the user's environment remains visible 
even if the user is not in range of the display unit. Thus, the synchronization signal 
104 only needs to control the phase, and not the frequency or amplitude, of the 
select signal 161. 

10 If the data frames 101 are binary or two-tone image, then a negation simply means 
turning all white components of the data frames, e.g., pixels with zero or off 
values, to black components in the negative frames, e.g. pixels with one or on 
values. If the data frame use a gray scale, then the negation simply subtracts the 
pixel values of the data frames from the maximum pixel value, i.e., 255 for an 

1 5 eight bit pixel value. 

Although a primary use of the invention is with portable display devices, it should 
be noted that the display system as described above can use any number of 
illumination techniques including CRT, LCD, LED, laser, digital projector - rear- 
20 or front, large or small, and so forth. 

Color Display 

In the case of color images, the negation is performed independently on each of the 
25 color channels, e.g., red, green, and blue for a "RGB" display system. Thus, for a 
system that display each of red, green, and blue at 256 levels, such as commonly 
available 24-bit (3x8) color mode display devices, each pixel of the red negative 
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frame is displayed at a value of 255 minus the corresponding red data frame pixel 
value. Similarly, the values for the green and blue channels are determined. 

The intensity of the light generated by most display devices is usually not a linear 
5 function of the applied signal. A conventional CRT has a power-law response to 
voltage. Therefore, the intensity of the light produced at the face of the screen of 
the display is approximately the applied voltage, raised to the 2.2 power. The 
numerical value of the exponent of this power function is colloquially known as 
gamma (y). This non-linearity must be compensated for in the negated frames. 

10 

To do this correction for a typical CRT type of display device, the input pixel 
values from 0 to 255, after negation, are remapped to output pixel values according 
to 

output = 255((input/255) 1/y ) + 0.5 
15 where y is obtained from the display device CRT manufacturer's specifications. 

Secure Display 

Figure 2 shows an alternative embodiment the input is a public image 201 and a 
20 secret image 102. The intensity values of the images 201-202 are respectively 
scaled and off-set 21 1-212 to produce a scaled public image A 221 and a scaled 
secret image Z 222. For every pixel p p in the public image 201, ap p + A, and the 
secret pixels are pp s + B. The scaled images 221-222 are then combined 230 to 
produce a mask image 240. The mask image 240 and scaled secret image 222 are 
25 then displayed 120 according to the select signal 161 produced by the controller 
160, as described above. The result is that without the optical shutter device 140, 
the perceived image 261 is the scaled public image 221. However, when the 
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display device 120 is viewed through the optical shutter device 140, the perceived 
image 262 is the scaled secret image 222. 

The scaling and off-setting are such that the intensity values of the mask image 240 
5 are within the dynamic range of the display device. If the normalized dynamic 
range of the display device is 0 to 1, and the respective scaling factors are a and 
p , and the off-sets A and B, thena + ,0 < 1 , and a + A < B. These inequalities 
constrain the respective dynamic ranges of the perceived public image 26 land the 
perceived secret images 262. A high-dynamic-range public image forces a low- 
10 dynamic-range, dim perceived secret image, and vice versa. If a - /? , and A=0.0 
and B= 0.5, the perceived public and secret images will be of equal quality. The 
perceived public image will lower in contrast with an elevated black level, and the 
perceived secret image will be dimmer, but still within a brightness range for 
acceptable viewing. 

15 

Coded Display 

The above described display devices provide a reasonable level of privacy for the 
casual user. However, because the displayed images alternate at a constant 
20 frequency, e.g., 60 Hz, the system is still open to attack by a persistent snooper. By 
scanning through the frequency range, a snooper could determined the frequency 
of the alternating display. 

Figure 3 shows an embodiment where a pseudo random (PR) generator 310 is used 
25 to generate a pseudo random sequence of zero and one bits 311. The random 

sequence can be produced by a hash function that uses a seed value, half of which 
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is stored internally, and the other half is supplied in real-time, perhaps at the frame 
rate. The PR generator 310 can be incorporated into the controller 160 instead of a 
constant frequency clock. 

5 In the case of a wireless interconnection, two pseudo-random generators can be 
used. Each is initialized to the same state and so will produce the same random 
sequence. One sequence is used in the display device, and the other in the optical 
shutter device. Synchronization between the sequences can be done as described 
above. 

10 

A coder 320 converts each zero bit to a pair of select signals [0,1], and each one bit 
to a pair of select signals [1,0]. The resulting coding sequences 321-322 are fed, in 
parallel, to the display device 120 and a shutter device 140 to perform the 
appropriate selection of the order of displayed images. Note, the pairs in the select 
15 signals 321 and 322 ensure that each successive pair of input frames 340 will 

alternate, so the perceived effect will be as above, with the added advantage that it 
is impossible for a snooper to determine the random sequence 311, without direct 
access to the equipment. 

20 Serial Coding 

So far, we have assumed that pixels are displayed and perceived in a parallel 
manner. This is effectively true for most LCD and CRT devices. Even though the 
pixels are initially generated in a serial beam and displayed in a raster scan order 
25 on a CRT, the relatively long decay time of the physical display elements, e.g., 
phosphor dots, parallelizes the perceived illumination. Consequently, the optical 
shutter device can operates at the frame rate of the display device. 
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For a device where the pixels can truly be displayed in a serial manner, e.g., LEDs, 
FLCs, or laser displays, we can modify the above encoding technique to further 
enhance the security of the displayed images. 

5 

In this embodiment, the input image is in the form of a serial stream of pixel values 
350, e.g., zeroes and ones for a binary image or byte values for gray-scale and 
color images. Now, we modulate the pixels and shutter on a per pixel basis. For 
every zero value in the coding sequence 321 we display the correct pixel value, and 
10 for every one bit in the coding sequence, we negate the pixel value, as described 
above with reference to Figure 1. Similarly, the opening and closing of the optical 
shutter device 140 is on a pixel basis, with the optical shutters closed for negated 
pixel values. Thus, some one viewing the display synchronized to the frame rate of 
the images will still only perceive a gray image. 

15 

LCD Display 

In the case where the display device 120 uses a low-powered liquid crystal display 
(LCD), such as used with many portable display systems, additional enhancement 
20 can be made, as shown in Figure 4, for the following reasons. First, a LCD cannot 
change state as quickly as CRT type of display devices, therefore perceived 
persistence may be an issue. Second, LCDs are generally low-power, aggravating 
the degradation of the perceived images. 

25 Therefore, our LCD 400 is constructed as follows. A first polarizer (P 1 ) 401 is 
disposes between a backlight (B) 420 and a first optical rotator element (R 1 ) 430. 
The backlight is a source of incident light of mixed polarization. We omit the 
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customary other polarizer found in conventional LCDs. In this embodiment, the 
optical shutter device 440 includes a second optical rotator element (R 2 ) 41 1 and a 
second polarizer (P 2 ) 412. An input image 400 is modulated 420 by angle of 
polarization. The modulation can be regular or random as described above. 

5 

If the images is viewed by the unaided eye, then it appears uniformly white. If the 
image is viewed through standard polarizing lenses, as for the prior art InvisiView 
device, it is still unreadable. However, when the image is viewed through the 
optical shutter device 410 modulated synchronously to the image 400, the image 
10 will become visible. 

The modulation of the rotators can be done adding ± 45° off-set to the normal 
polarization modulation. This can be done by biasing the overall screen voltage, 
because in the LCD, the amount of rotation is substantially linearly proportional to 
1 5 the driving voltage. As described above, the modulation of the rotators can be done 
periodically or randomly, depending on the level of security desired. 

Thus, areas of the image that appear bright in one polarization direction appear 
dark in a perpendicular direction, and these are reverse whenever the +45 to -45 
20 degree rotational voltage modulation occurs. The result is as before, the screen 
appears a featureless gray to unauthorized viewers, even those wearing polarizing 
sunglasses, and only properly modulated shutter devices will make the image 400 
visible. 

25 This invention is described using specific terms and examples. It is to be 

understood that various other adaptations and modifications may be made within 
the spirit and scope of the invention. Therefore, it is the object of the appended 
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claims to cover all such variations and modifications as come within the true spirit 
and scope of the invention. 
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